EFF: Dark Caracal: Good News and Bad News
Dark Caracal: Good News and Bad News Yesterday, EFF and Lookout announced a new report, Dark Caracal , that uncovers a new, global malware espionage campaign. One aspect of that campaign was the use of malicious, fake apps to impersonate legitimate popular apps like Signal and WhatsApp. Some readers had questions about what this means for them. This blog post is here to answer those questions and dive further into the Dark Caracal report. First, the good news: Dark Caracal does not mean that Signal or WhatsApp themselves are compromised in any way. It only means that attackers found new, insidious ways to create and distribute fake Android versions of them. (iOS is not affected.) If you downloaded your apps from Google’s official app store, Google Play, then you are almost certainly in the clear. The threat uncovered in the Dark Caracal report referred to “ trojanized ” apps, which are fake apps that pretend to look like real, trusted ones. These malicious spoofs often ask for e...